#C-BAS: Certificate-based AAA for SDN Experimental Facilities
##Description C-BAS is a certificate-based AAA architecture for SDN experimental facilities, which is by design both secure and flexible. We are developing C-BAS as a robust AAA infrastructure solution to identify experimenters, police their actions based on the associated roles, facilitate secure resource sharing, and provide for detailed accountability.
##Publications Interested readers should consider reviewing the following papers, which overview C-BAS architecture and implementation as well as presents a migration path for its introduction in larger scale in SDN experimental facilities.
-
Umar Toseef, Adel Zaalouk, Tom Rothe, Matthew Broadbent, and Kostas Pentikousis, "C-BAS: Certificate-based AAA for SDN Experimental Facilities", Proc. EWSDN 2014, doi>10.1109/EWSDN.2014.41, Budapest, Hungary, September 2014.
-
Umar Toseef and Kostas Pentikousis, "Implementation of C-BAS: Certificate-based AAA for SDN Experimental Facilities", Proc. IEEE NCCA 2015, Munich, Germany, June 2015.
##Acknowledgement This work has been partially funded by the Commission of the European Union within the framework of the FP7 projects ALIEN (www.fp7-alien.eu) and FELIX (www.ict-felix.eu).
##Wiki Please refer to wiki section for installation and usage instructions.
Prerequisites:
- It is recommended to use python virtualenv
- It is required to add a DNS entry for your.domain.com that will point into your public IPv4 (for the development purposes you may just add an entry in the /etc/hosts)
- You need to install git
This software was tested under Ubuntu 16.04LTS / 18.04.1 LTS and Python 2.7.
- Clone the repository
git clone git@github.com:radomirklacza/C-BAS.git
cd C-BAS/- Install dependencies
sudo ./install_dependencies.sh- Install python modules (python 2.7):
pip install --upgrade pip
pip install -r requirements.txt- Copy default configurations:
./configure.onelab.sh - Update src/plugins/geni_trust/gen-certs.py. Replace auth.onelab.eu with your.domain.com
- Generate private key and certificate:
sh test/creds/gen-certs.sh your.domain.com- Start C-BAS:
sudo sh cbas.sh start